PL2_Close
PL2_GetCurSettings
PL2_GetMode
PL2_Open
PL2_Process
PL2_Reset
PL2_SetCurSettings
PL2_SetMode
Static task
static1
Behavioral task
behavioral1
Sample
f599abb1bd76636cd689728e6e40b7cc_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f599abb1bd76636cd689728e6e40b7cc_JaffaCakes118
Size
200KB
MD5
f599abb1bd76636cd689728e6e40b7cc
SHA1
c842f02dba8e6ccb2d2e5daa6cb736ad4b76d9b9
SHA256
17338a454f7baf5f73b7ff7a65e322e328f0dc192b3de8e50d9a0205fc8cd57f
SHA512
cd325d43649cf4fb575d503b2edd1c47f56bbf6103ea186374680dd1d085f6947a9080599cce6a6e9627db9d452447ad63f4f080423e0672d3504b2dd2f0e72e
SSDEEP
3072:DpNFkmhDDo7QFDE5ICjmYq8Uh+cjTm9KpZQqekhwrjm2IHd/2pzl:ltAbJq8UHjTm9KYSwW1ep
Checks for missing Authenticode signature.
resource |
---|
f599abb1bd76636cd689728e6e40b7cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcess
GetThreadPriority
GetCurrentThread
VirtualAlloc
SetThreadPriority
VirtualFree
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RtlUnwind
SetStdHandle
FlushFileBuffers
CloseHandle
PL2_Close
PL2_GetCurSettings
PL2_GetMode
PL2_Open
PL2_Process
PL2_Reset
PL2_SetCurSettings
PL2_SetMode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ